Performing a Cloudera Data Hub OS upgrade
Perform a Cloudera Data Hub OS upgrade to update the OS and VM packages to those available in the latest pre-warmed image.
Required role: DatahubAdmin or Owner over the Cloudera Data Hub cluster
It your cluster uses Streams Replication Manager (SRM), it is likely that you are storing security files, like truststores, in /opt/cloudera/security/ on your cluster hosts. These files are lost during the upgrade. As a result, you must back them up before the upgrade and restore them following the upgrade.
Before performing any OS upgrade, make sure there is no data belonging to NiFi or NiFi Registry on the root disk of the VM (this is the case for any version before Cloudera Runtime 7.2.10).
If you have NiFi or NiFi Registry data on the root disk, run the commands below to move the data to the right location prior to performing the upgrade. Before executing these scripts, stop the NiFi and NiFi Registry services.
On the NiFi nodes:
When upgrading from Cloudera Runtime 7.2.9 or lower versions
hadoopDirectory=/hadoopfs/$(ls /hadoopfs/ | sort | tail -n 1) mkdir $hadoopDirectory/working-dir cp -R /var/lib/nifi/* $hadoopDirectory/working-dir echo "nifi.working.directory should be set to $hadoopDirectory/working-dir"latest_nifi_conf_directory=$(find /run/cloudera-scm-agent/process -name nifi\.properties | sort | tail -n 1) latest_nifi_conf_directory=${latest_nifi_conf_directory%nifi.properties} echo "Latest nifi conf directory used to copy files before migration: $latest_nifi_conf_directory"mkdir -p $hadoopDirectory/working-dir/config_backup chmod 755 $hadoopDirectory/working-dir/config_backup cp $latest_nifi_conf_directory/nifi.properties $hadoopDirectory/working-dir/config_backup cp $latest_nifi_conf_directory/bootstrap.conf $hadoopDirectory/working-dir/config_backup chown nifi:nifi -R $hadoopDirectory/working-dir
After the bash script executes, update the nifi.working.directory configuration value with what the script returns.
To set nifi.working.directory, perform the following steps:
- Open the Cloudera Manager UI.
- Go to the NiFi service.
- Select the Configuration tab.
- Search for nifi.working.directory.
- Set the new value and click Save.
On the management node (where NiFi Registry is):
hadoopDirectory=/hadoopfs/$(ls /hadoopfs/ | sort | tail -n 1) mkdir $hadoopDirectory/working-dir cp -R /var/lib/nifiregistry/* $hadoopDirectory/working-dir chown nifiregistry:nifiregistry -R $hadoopDirectory/working-dir echo "nifi.registry.working.directory should be set to $hadoopDirectory/working-dir"
After the bash script executes, update the nifi.registry.working.directory configuration value with what the script returns.
To set nifi.registry.working.directory, perform the following steps:
- Open the Cloudera Manager UI.
- Go to the NiFi service.
- Select the Configuration tab.
- Search for nifi.registry.working.directory.
- Set the new value and click Save.
After the new configuration values are set on the NiFi and the management nodes, start the services.
If you upgraded from Cloudera Runtime 7.2.9 or a lower version, perform the following tasks on the NiFi UI as post-upgrade steps when NiFi is available and running.
- Open the NiFi UI.
- Select Controller Settings from the Global Menu available in the top-right corner of the NiFi UI.
- Go to the Management Controller Services tab of the NiFi Settings dialog.
- Edit the Default Reporting Task SSL Context Service.
- Disable the running controller service by using the
button.
- Modify the Keystore Filename value to point to the new nifi working directory. Use /hadoopfs/fs4/working-dir/cm-auto-host_keystore.jks instead of /var/lib/nifi/cm-auto-host_keystore.jks.
- Click APPLY.
- Disable the running controller service by using the
- Enable the Default Reporting Task SSL Context Service using the
button.
- Go to the Reporting Tasks tab.
- Edit the Default Atlas Reporting Task by clicking the
button.
- Modify the Atlas Configuration Directory to point to the new nifi working directory. Use /hadoopfs/fs4/working-dir/ instead of /var/lib/nifi/.
- Modify the Kerberos Keytab to point to the new nifi working directory. Use /hadoopfs/fs4/working-dir/nifi.keytab instead of /var/lib/nifi/nifi.keytab.
- Click APPLY.
If your cluster uses SRM, restore the security files you backed up before the upgrade.